diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2021-04-27 17:33:09 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2021-04-27 17:33:09 +0300 |
| commit | 05f9b5a73c8c21cdf25a9d4ce984cc9bf21985c3 (patch) | |
| tree | 56da6672965506b295210025da73ec1fb7faf2c6 /CHANGELOG.md | |
| parent | a7201419a1123f77f563f0cf232639e1e3a129af (diff) | |
Add latest changes from gitlab-org/security/gitlab@13-9-stable-eev13.9.7
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 0ac3dec21c8..892e8648b70 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,18 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 13.9.7 (2021-04-27) + +### Security (6 changes) + +- Prevent tokens with only read_api scope from executing mutations. +- Update mermaid to version 8.9.2. +- Do not allow deploy tokens in the dependency proxy authentication service. +- Disable keyset pagination for branches by default. +- Bump Carrierwave gem to v1.3.2. +- Restrict setting system_note_timestamp to owners. + + ## 13.9.6 (2021-04-13) ### Security (2 changes) |